Approved changes feed: RSS · Atom

cpe:2.3:a:openbsd:openssh:6.2:p2:*:*:*:*:*:*

part: a version: 6.2 update: p2

VendorOpenbsd (932cdfc2-94b9-5fb6-8ef3-d0b271f414b5)
ProductOpenssh (00fc4953-faf7-5f04-8d3d-4edd44206199)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openssh/openssh-portable purl2cpe 2026-06-01 10:17:38.304461
pkg:mindrot/openss purl2cpe 2026-06-01 10:17:38.304463
pkg:openbsd/openssh purl2cpe 2026-06-01 10:17:38.304464
pkg:rpm/fedora/openssh purl2cpe 2026-06-01 10:17:38.304466
pkg:rpm/opensuse/openssh purl2cpe 2026-06-01 10:17:38.304467

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-0778 vulnerable 2026-06-08 05:07:16.232433 Details available
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
Published: 2016-01-14T00:00:00.000Z
Updated: 2026-05-29T20:28:32.960Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0777 vulnerable 2026-06-08 05:07:16.221227 Details available
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
Published: 2016-01-14T00:00:00.000Z
Updated: 2026-05-29T20:30:01.702Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.